|
|
Family: CGI abuses --> Category: infos
vBulletin SQL injection Issue Vulnerability Scan
Vulnerability Scan Summary
Checks the version of vBulletin
Detailed Explanation for this Vulnerability Test
Synopsis :
The remote web server contains a PHP script that is susceptible to a
SQL injection attack.
Description :
According to its banner, the remote version of vBulletin is vulnerable
to a SQL injection issue. It is reported that versions 3.0.0 through
to 3.0.3 are prone to this issue. A possible hacker may exploit this flaw
to gain the control of the remote database.
See also :
http://www.vbulletin.com/forum/showthread.php?p=734250#post734250
http://www.vbulletin.com/forum/showthread.php?t=124876
Solution :
Upgrade to vBulletin 3.0.4 or later.
Threat Level:
Medium / CVSS Base Score : 5
(AV:R/AC:L/Au:NR/C:P/A:N/I:P/B:N)
Click HERE for more information and discussions on this network vulnerability scan.
|
